Mfscripts Yetishare vulnerabilities

• mfscripts yetishare file hosting script YetiShare File Hosting Script 5.1.0 Remote File Upload SSRF Vulnerability CVE-2021-47899 6.9 MediumJanuary 23, 2026
• mfscripts yetishare MFScripts YetiShare v3.5.2 through v4.5.4 places sensitive information in the Referer header. If... CVE-2019-20060 7.5 HighFebruary 10, 2020
• mfscripts yetishare The user-introduction email in MFScripts YetiShare v3.5.2 through v4.5.4 may leak the (system... CVE-2019-20061 7.5 HighFebruary 10, 2020
• mfscripts yetishare MFScripts YetiShare v3.5.2 through v4.5.4 might allow an attacker to reset a password by using a... CVE-2019-20062 9.8 CriticalFebruary 10, 2020
• mfscripts yetishare payment_manage.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.4... CVE-2019-20059 Public exploit 8.8 HighFebruary 10, 2020
• mfscripts yetishare _account_forgot_password.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 displays a message... CVE-2019-19806 5.3 MediumDecember 30, 2019
• mfscripts yetishare _account_forgot_password.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 takes a different... CVE-2019-19805 5.3 MediumDecember 30, 2019
• mfscripts yetishare log_file_viewer.php in MFScripts YetiShare 3.5.2 through 4.5.3 does not sanitize or encode the... CVE-2019-19738 6.1 MediumDecember 30, 2019
• mfscripts yetishare MFScripts YetiShare 3.5.2 through 4.5.3 does not set the SameSite flag on session cookies,... CVE-2019-19737 8.8 HighDecember 30, 2019
• mfscripts yetishare MFScripts YetiShare 3.5.2 through 4.5.3 does not set the HttpOnly flag on session cookies,... CVE-2019-19736 6.1 MediumDecember 30, 2019
• mfscripts yetishare class.userpeer.php in MFScripts YetiShare 3.5.2 through 4.5.3 uses an insecure method of creating... CVE-2019-19735 9.1 CriticalDecember 30, 2019
• mfscripts yetishare _account_move_file_in_folder.ajax.php in MFScripts YetiShare 3.5.2 directly inserts values from... CVE-2019-19734 8.8 HighDecember 30, 2019
• mfscripts yetishare _get_all_file_server_paths.ajax.php (aka get_all_file_server_paths.ajax.php) in MFScripts... CVE-2019-19733 6.1 MediumDecember 30, 2019
• mfscripts yetishare translation_manage_text.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2... CVE-2019-19732 7.2 HighDecember 30, 2019
• mfscripts yetishare MFScripts YetiShare 3.5.2 through 4.5.3 does not set the Secure flag on session cookies, allowing... CVE-2019-19739 7.5 HighDecember 30, 2019